Back

Cannot renew domain (cloud.rubyguard.org) on attempt no. 6 certificate: You must set a valid securit

  • 0
  • Self Hosted
Mosh Ontong
18 Sep, 2024, 12:32

now this is the new error found

TL;DR
Developers are having trouble renewing a domain certificate due to a security issue. To resolve it, additional lines need to be added to the traefik command block. Cloudflare settings also need to be adjusted to allow Letsencrypt to access the server. Make sure to follow specific rules and bypass WAF settings for Letsencrypt. Additional details and instructions can be found in the provided link.
Joshi
18 Sep, 2024, 12:33

Apparently you already have a certificate

Mosh Ontong
18 Sep, 2024, 12:33
Joshi
18 Sep, 2024, 12:33

What are your SSL settings in cloudflare?

Joshi
18 Sep, 2024, 12:33

And have you set any other setting in cloudflare so far?

Mosh Ontong
18 Sep, 2024, 12:33
Mosh Ontong
18 Sep, 2024, 12:34

only the WAF

Joshi
18 Sep, 2024, 12:36

What is your _APP_OPTIONS_FORCE_HTTPS value in your .env

Mosh Ontong
18 Sep, 2024, 12:38
Joshi
18 Sep, 2024, 12:38

can you disable for now and try again

Joshi
18 Sep, 2024, 12:39

To be honest I don't know how appwrite handles a situation where you change your domain afterwards

Mosh Ontong
18 Sep, 2024, 12:42
Mosh Ontong
18 Sep, 2024, 12:42

its working right know

Mosh Ontong
18 Sep, 2024, 12:42

I disabled the for https

Joshi
18 Sep, 2024, 12:42

You can keep it disabled because cloudflare will handle that for you

Mosh Ontong
18 Sep, 2024, 12:42

anywas regards with bypassing lets encrpyt

Joshi
18 Sep, 2024, 12:43

Set cloudflare SSL to full and enable redirect to https

Mosh Ontong
18 Sep, 2024, 12:43
Mosh Ontong
18 Sep, 2024, 12:44

when I deploy it

Mosh Ontong
18 Sep, 2024, 12:44

it said that the action parameter for skip is required

Joshi
18 Sep, 2024, 12:44

Check "All remaining custom rules"

Joshi
18 Sep, 2024, 12:45

This will allow letsencrypt to access your server

Mosh Ontong
18 Sep, 2024, 12:46

Thank you so much for helping me

Joshi
18 Sep, 2024, 12:47

You're welcome.

Joshi
18 Sep, 2024, 12:48

Oh there is one more thing. Almost forgot.

Add the following lines to your traefik command block

TypeScript
      - --entryPoints.appwrite_websecure.forwardedHeaders.trustedIPs=198.41.200.0/24,198.41.192.0/24,173.245.48.0/20,103.21.244.0/22,103.22.200.0/22,103.31.4.0/22,141.101.64.0/18,108.162.192.0/18,190.93.240.0/20,188.114.96.0/20,197.234.240.0/22,198.41.128.0/17,162.158.0.0/15,104.16.0.0/13,104.24.0.0/14,172.64.0.0/13,131.0.72.0/22``` 
These are the ips from cloudflare https://www.cloudflare.com/ips-v4/#

You have to do that in order to show the real ip from the user. Otherwise it will use the ips from cloudflare. After that you should be set and ready to go.
Reply

Reply to this thread by joining our Discord

Reply on Discord

Need support?

Join our Discord

Get community support by joining our Discord server.

Join Discord

Get premium support

Join Appwrite Pro and get email support from our team.

Learn more